Privacy Policy

1. Who We Are

DivePurpose ("we", "us", "our") is a content and discovery platform that helps divers connect with purpose-driven dive shops, NGOs, and conservation projects.

We are currently operated by Livesysx OÜ (Estonia) on behalf of DivePurpose.com.

Operator details:

• Livesysx OÜ
• Registry code: 14744997
• Estonia
• Email: info@divepurpose.com

This Privacy Policy explains what data we collect, why we collect it, and how we use, store, and protect it.

2. Data We Collect

We collect different types of information depending on how you interact with DivePurpose.

2.1 Data you submit directly (booking or contact forms):

• Name
• Email address
• Phone number
• WhatsApp number (if given)
• Travel dates
• Certification level
• Trip purpose
• Message or special requests
• Any files or content you attach

2.2 Newsletter signup:

• Name (optional)
• Email address
• MailerLite is used to deliver emails

2.3 Automatic analytics (server-side only):

• Pages viewed
• Click actions (e.g., booking button clicks)
• Device type
• Country (approximate)
• Referrer
• Anonymous session identifiers

2.4 Google services we rely on:

• Google Search Console (site performance)
• Potential future use of Google Analytics
• Potential future use of Google AdSense

2.5 Functional cookies we may set:

• Session cookies for tracking clicks server-side
• Cloudflare Turnstile security cookies
• Functional cookies required by Rybbyt

2.6 Meta Pixel (ads measurement):

• Page view and conversion events used to understand the effectiveness of campaigns
• Basic browser and device metadata required by Meta to prevent fraud
• Hashed identifiers (e.g., email) only if you explicitly submit them and we run retargeting ads

We store booking/contact form submissions until you request deletion.

Meta Pixel cookies are only used for measurement and can be disabled through your browser or ad preference settings.

3. How We Use Your Data

We only use your information to deliver the DivePurpose experience.

3.1 To forward your booking request:

• Your submission is emailed directly to the dive shop, NGO, or operator you selected.
• This is the core function of DivePurpose.

3.2 To contact you:

• Clarify your request
• Confirm receipt
• Help resolve communication issues
• Send updates if you opted in

3.3 To improve DivePurpose:

• Improve directory quality
• Identify what divers look for
• Refine the user experience
• Build new features
• Produce non-identifying aggregated statistics

3.4 Newsletter (optional):

• Updates about DivePurpose
• New purposeful dive opportunities
• Stories, guides, and educational content
• You can unsubscribe anytime

4. Who We Share Data With

We only share your data to operate the platform and deliver your requests.

4.1 The dive shop you contact:

• We forward all details you provide via email to the selected operator.
• They receive the exact information you submitted.

4.2 Service providers we rely on:

• Cloudflare (security, Turnstile)
• Rybbyt (server-side analytics)
• MailerLite (newsletter)
• Meta Platforms (Meta Pixel analytics/ads measurement)
• Hosting provider (EU-based server)
• Self-hosted mail server / Nodemailer

We do not sell or trade user data.

5. Legal Basis (GDPR)

We process personal data under the following legal bases:

• Art. 6(1)(b) – Contract / pre-contract when you submit a booking
• Art. 6(1)(a) – Consent for newsletters and optional cookies
• Art. 6(1)(f) – Legitimate interest for analytics, anti-fraud, and security

6. Data Storage & Retention

We store your data only as long as needed to process your request or until you ask us to delete it.

Copies of booking emails may exist in inbox backups.

7. Your Rights (GDPR)

You can exercise the following rights at any time by contacting info@divepurpose.com:

• Access your data
• Correct your data
• Request deletion
• Withdraw newsletter consent
• Request restriction of processing
• Object to processing
• Request portability (export)

8. Data Transfers

Our servers are located in the EU.

Some third-party processors (e.g., MailerLite, Google) may process data outside the EU under Standard Contractual Clauses (SCCs).

9. Children's Privacy

DivePurpose is intended for users who are 18 or older.

We do not knowingly collect personal data from minors.

If you believe a minor submitted data, contact us and we will delete it.

10. Security

We take reasonable measures to protect your data, including:

• SSL encryption
• Safeguarded EU hosting
• Limited access to inboxes
• Cloudflare DDoS protection
• Anti-spam screening with Turnstile

No system is fully secure, but we work to minimize risks.

11. Copyright & Content

DivePurpose lists information that is publicly available on dive operators' websites.

We do not scrape proprietary content or copy copyrighted materials.

We honor removal requests immediately.

Operators are responsible for ensuring that images or text they submit do not infringe copyrights.

12. Updates to This Policy

We may update this Privacy Policy as DivePurpose evolves.

Significant changes will be highlighted on this page.

13. Contact

For any privacy questions or to exercise your rights:

• info@divepurpose.com
• Livesysx OÜ, Estonia